CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 RCE exp Affected versions VMware View Planner Harness 4.X Similar to CVE-2021-21978, this vulnerability allows uploading arbitrary files without authentication, and achieving remote code execution by modifying the built-in py script. It is worth noting that commands...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability PoC This script showcases a proof of concept PoC for CVE-2024-21413, a critical security flaw identified in Microsoft Outlook with a CVSS score of 9.8. Dubbed the MonikerLink exploit, this vulnerability carries extensive consequences, such as...

gods-eye-view

🌐 God's Eye View A spy-satellite simulator in your browser — then you realize the sources are public and the data is real. Photorealistic 3D globe. Live aircraft, ships, satellites, earthquakes, traffic, and public cameras. Hands-free voice control powered by a realtime AI agent. No place left...

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...

Netryx-Astra-V2-Geolocation-Tool

Netryx Astra V2 State-of-the-art AI geolocation from a single image. The Idea • How It Works • Getting Started • Community Hub • Installation The Idea You have a photograph. Maybe it's a screenshot from a video. Maybe it's a cropped, blurry phone photo someone posted online. Maybe it shows just a...

CVE-2026-23498

CVE-2026-23498: Shopware Has Improper Control of Generation of Code in Twig rendered views Overview Field| Details ---|--- CVE ID| CVE-2026-23498 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products shopware/shopware versions: = 6.7.0.0, = 6.7.0.0, 6.7.6.1 CWE...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full walkthrough of TryHackMe's "Moniker Link" room: weaponizing CVE-2024-21413, a 2024 Microsoft Outlook vulnerability, to steal a victim's NTLMv2 hash the moment they click a link in a phishing email — no macro, no attachment, no obvious...

SPiCa

SPiCa System Process Integrity & Cross-view Analysis "I'm going to sing, so shine bright, SPiCa..." SPiCa is an eBPF-based Linux rootkit detector written in Rust. The name comes from the Hatsune Miku song SPiCa and the star it references — Spica Alpha Virginis, the brightest point in Virgo. What...

idaguides

IDA Guides Small plugin for IDA that adds indent guides to the decompiler view. Installation 1. Clone or download this repository 2. Extract it's contents to your IDA plugins directory 3. Restart IDA Tested With IDA 9.2, 9.3...

creepy-plugins

creepy-plugins Description Plugins for cree.py The architecture of cree.py allows for multiple user-defined sources for geolocation information. These sources are defined as plugins and can be installed in creepy by copying them into the plugins folder under the installation directory. New plugin...

cve-2024-21413-outlook-monikerlink-lab

CVE-2024-21413 — Outlook Moniker Link Lab / PoC Educational lab notes and a small Proof of Concept PoC demonstrating the CVE-2024-21413 attack flow in a controlled environment TryHackMe-style lab. ⚠️ For educational purposes only. Do not use against systems you don’t own or have explicit permissio...

CVE-2021-21978

CVE-2021-21978 Exploit script with echo back, a simpler way 0. Vulnerability Information The VMware View Planner Web management interface has an entry for uploading log functionality files, which requires no authentication and the log file path written is user-controllable. By overwriting the...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 EXP VMware View Planner RCE CVE-2021-21978 Reverse shell...

CVE-2019-5418

CVE-2019-5418: Ruby on Rails Path Traversal & Arbitrary File Read This project is an environment for practicing and reproducing the local file inclusion vulnerability CVE-2019-5418 in Ruby on Rails. This vulnerability allows reading arbitrary files on the server through path traversal via the...

CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability

CVE-2024-21413 – Microsoft Outlook Moniker Link Vulnerability Overview This repository documents my hands-on analysis of CVE-2024-21413 Moniker Link , a critical Microsoft Outlook vulnerability that bypasses Protected View to leak Windows NetNTLMv2 credentials via SMB authentication. Severity:...

CVE-2020-0014-Toast

CVE-2020-0014 Toast Reproduction This vulnerability allows a malicious app to intercept user operations on the screen by constructing a clickable Toast view, thereby achieving the purpose of collecting sensitive information such as user passwords. Affected versions: Android 8.0, 8.1, 9, 10 Only...

CVE-2019-5418

CVE-2019-5418 - File Content Disclosure on Rails EDIT : this CVE can lead to a Remote Code Execution, more info: https://github.com/mpgn/Rails-doubletap-RCE There is a possible file content disclosure vulnerability in Action View. Specially crafted accept headers in combination with calls to rend...

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...

CVE-2026-97161

CVE-2026-97161 — UP Plugin Path Traversal / File Read Joomla Python 3 PoC for CVE-2026-97161 — UP Universal Plugin for Joomla lomart.fr. Description PoCbit / GitHub CVE-2026-97161 — UP 5.0.0–5.2.0 and 6.0.0–6.0.29 expose unauthenticated path traversal / arbitrary file read CWE-22, CWE-284 through...